Vulnerabilities of Go standard library net/http/internal
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-22871 | The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines | 9.1 Critical | Apr 8, 2025 |
| CVE-2023-39326 | A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read… | Not rated | Dec 6, 2023 |